summaryrefslogtreecommitdiff
path: root/kernel/audit_watch.c
diff options
context:
space:
mode:
authorRichard Guy Briggs <rgb@redhat.com>2016-01-25 18:04:15 -0500
committerPaul Moore <paul@paul-moore.com>2016-01-25 18:04:15 -0500
commit935c9e7ff06abf12c45155f75ec2f712d3768095 (patch)
treeac1118ff77239fe8f939c9bfd2afe37cc5c4fa19 /kernel/audit_watch.c
parent133e1e5acd4a63c4a0dcc413e90d5decdbce9c4a (diff)
downloadlinux-stable-935c9e7ff06abf12c45155f75ec2f712d3768095.tar.gz
audit: log failed attempts to change audit_pid configuration
Failed attempts to change the audit_pid configuration are not presently logged. One case is an attempt to starve an old auditd by starting up a new auditd when the old one is still alive and active. The other case is an attempt to orphan a new auditd when an old auditd shuts down. Log both as AUDIT_CONFIG_CHANGE messages with failure result. Signed-off-by: Richard Guy Briggs <rgb@redhat.com> Signed-off-by: Paul Moore <pmoore@redhat.com>
Diffstat (limited to 'kernel/audit_watch.c')
0 files changed, 0 insertions, 0 deletions